     (ct/routes
      [[:any (cauth/auth backend)]
       [:any (cmisc/autoreloader)]
+      [:get "api" #'welcome-api]
       [:prefix "api"
+       [:any (cmisc/cors cors-conf)]
        [:any (cparse/body-params)]
        [:error #'ufe/handler]
+
        [:post "auth/token" #'ufa/login]
        [:any #'authorization]
 

       [:put "pages/:id" #'ufp/page-update]
       [:delete "pages/:id" #'ufp/page-delete]
       [:post "pages" #'ufp/page-create]
       [:get "pages" #'ufp/page-list]

       [:get "" #'welcome-api]]
      [:get "" #'redirect-to-api]])))

    (-> (sz/encode body :json)
        (http/ok {:content-type "application/json"}))))

(defn- authorization
  [{:keys [identity] :as context}]
  (if identity
    (ct/delegate {:identity (UUID/fromString (:id identity))})
    (http/forbidden (ufc/rsp {:message "Forbidden"}))))

(def cors-conf
  {:origin "*"
   :max-age 3600
   :allow-headers ["X-Requested-With", "Content-Type"]})

(defn app
  []
